Aggregated Signature System for Constrained Node Authenticity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In networks with computationally-constrained nodes, efficient generation and verification of digital signatures are hindered, limiting message authenticity and the ability to identify rogue signatures.

Innovation Solution

A Fiat-Shamir-based digital signature system with aggregated-signature generation and batch verification, using a template with fields like aggregation depth, message identifier, and aggregated square random integer mod N, enables efficient signature generation and fast verification, ensuring message authenticity and identifying rogue signatures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional digital signature methods are used in networks with computationally-constrained nodes, then message authenticity can be established, but the ability of constrained nodes to sign and verify messages is greatly limited due to high computational requirements

Engineering Contradiction:
Improvemessage authenticityVSAvoidsignature generation and verification capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent merges multiple individual signatures into a single aggregated signature that represents a batch of messages. The aggregation process combines signature elements from multiple signers into one compact representation, allowing computationally-constrained nodes to verify multiple messages simultaneously with reduced computational overhead while maintaining the authenticity guarantee of individual signatures

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If individual signature verification is performed for each message, then message authenticity is ensured, but verification time increases significantly when multiple messages need to be verified

Engineering Contradiction:
Improvemessage authenticity verificationVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The verification process merges multiple signature verifications into a single batch verification operation. By aggregating signature elements and verifying them collectively against the batch of messages, the system reduces total verification time while maintaining the reliability of authenticity verification for each individual message in the batch

Inventive Principle:
Principle #5Merging (Combining)

3Productivity

If batch verification is implemented to reduce verification time, then verification efficiency improves, but the ability to pinpoint the source of rogue messages becomes more difficult

Engineering Contradiction:
Improveverification efficiencyVSAvoidrogue message source identification
Core Design Contradiction:
ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent segments the batch verification process into individual message verification steps that can be performed sequentially when a rogue message is detected. The aggregation structure maintains information about individual message contributions, allowing the system to isolate and identify the specific message causing verification failure while still benefiting from the efficiency of batch processing for legitimate messages

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10469266B2Signature method and system
Publication Date: 2019.11.05 CISCO TECHNOLOGY INC
  • US10469266B2 patent drawing
  • US10469266B2 patent drawing
  • US10469266B2 patent drawing

AI summary

In one embodiment, a first signature template is received, the first signature template being one of a signature template of a first message or a null template, the first signature template comprising at least the following fields: an aggregation depth field, a message identifier, one of the first message or a result of applying a one way hash function to the first message, a bit vector, an aggregated square random integer mod N, a signature of the first message. A second signature template is created based on the first signature template, the second signature template created as follows: increment the aggregation depth of the first signature template, determine a unique message identifier for a second message, determine a second bit vector, determine an second aggregated square random integer mod N, and calculate a new signature for the second message. Related methods, apparatus, and systems are also disclosed.